1a98b2eee06d7d59656a9e830f7ffa5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a98b2eee06d7d59656a9e830f7ffa5f
Size

137KB
MD5

1a98b2eee06d7d59656a9e830f7ffa5f
SHA1

edc2468a9403f786301fb93c0c0c81a9d820f556
SHA256

0ffc6d806e82b2c675de07fa5207c859a8f8a83070d055b92f1837c3fefdce56
SHA512

efdb8787be410a8303216a0cd8996b24779525e1f07394b65db78cb15c5414745d9d33d5020f4ea6a32c68f3865451533f5c25f2ceb3d56e047b91a71040e19a
SSDEEP

3072:hJvHGUrUS6bpduI9gQhUDSxLROR0iaWj3w7w1IEKFP9QPXEIYOKzK10:hhJv68ULROR05WjyoKPQPUI5q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a98b2eee06d7d59656a9e830f7ffa5f

Files

1a98b2eee06d7d59656a9e830f7ffa5f
.exe windows:4 windows x86 arch:x86

de16a106bf3f7786749b5543d39e0e86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
GetWindowsDirectoryA
lstrcatA
CreateFileA
LoadLibraryA
GetProcAddress

gdi32

GetStockObject

Sections

.data
Size: 512B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ